Oval Definition:oval:com.ubuntu.trusty:def:20199020000
Revision Date:2019-02-22Version:1
Title:CVE-2019-9020 on Ubuntu 14.04 LTS (trusty) - medium.
Description:An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. Invalid input to the function xmlrpc_decode() can lead to an invalid memory access (heap out of bounds read or read after free). This is related to xml_elem_parse_buf in ext/xmlrpc/libxmlrpc/xml_element.c.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2019-9020
Platform(s):Ubuntu 14.04 LTS
Product(s):
Definition Synopsis
  • Ubuntu 14.04 LTS (trusty) is installed.
  • AND The 'php5' package in trusty was vulnerable but has been fixed (note: '5.5.9+dfsg-1ubuntu4.27').
  • BACK